CN101005459B - Radio sensor access control method based on key chain - Google Patents

Radio sensor access control method based on key chain Download PDF

Info

Publication number
CN101005459B
CN101005459B CN2007100172525A CN200710017252A CN101005459B CN 101005459 B CN101005459 B CN 101005459B CN 2007100172525 A CN2007100172525 A CN 2007100172525A CN 200710017252 A CN200710017252 A CN 200710017252A CN 101005459 B CN101005459 B CN 101005459B
Authority
CN
China
Prior art keywords
chain
key
user
key chain
certificate
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN2007100172525A
Other languages
Chinese (zh)
Other versions
CN101005459A (en
Inventor
沈玉龙
裴庆祺
马建峰
于全
尹浩
徐启建
唐宏
杨卫东
张红斌
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Xidian University
Original Assignee
Xidian University
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Xidian University filed Critical Xidian University
Priority to CN2007100172525A priority Critical patent/CN101005459B/en
Publication of CN101005459A publication Critical patent/CN101005459A/en
Application granted granted Critical
Publication of CN101005459B publication Critical patent/CN101005459B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)

Abstract

The invention is based on five highly-effective sensor network access control modes: which are one-way key chain access control, multi key chain access control, Merkle tree-based access control, expanded Merkle tree access control, and an mode of canceling the key chain of captured users with Merkle. The method uses said five access control modes to reduce the storage expense of sensor node and increase the flexibility and expandability of access control so as to support mass users to access network. The invention is compatible with current sensor network data broadcast protocol.

Description

Radio sensor access control method based on key chain
Technical field
The invention belongs to network communications technology field, relate to the wireless self-organization network safe practice, it specifically is the principle of utilizing one-way key chain (hereinafter using key chain to replace one-way key chain) and Merkle tree, a kind of wireless sensor network based on key chain (WSN) access control method of energy efficient is proposed, solve user capture control problem in the wireless sensor network, the user who promptly has legal identity can send request to sensor network, and obtain the response of network, refusal disabled user visit.
Background technology
Sensor network is little by a large amount of volumes, low price, powered battery, sensor node with radio communication and monitoring capability are formed.These nodes are by the dense monitored area that is deployed in, to reach the purpose of monitoring physical world.Wireless sensor network is a new research direction in the information technology, is with a wide range of applications at aspects such as environmental monitoring, forest fire protection, military affairs, Homeland Security, traffic control, community's security protection, target localizations.
In the practical application of sensor network, since the deployment of network is not free, access control is one of important security service of sensor network.Access control can guarantee to have legal identity and can ask the access sensors Internet resources by the user who authenticates.On civilian, sensor network provides environmental information request service as the supplier of business to the user, and only the user of ordering services can send request and meet with a response in network.Afield, the communication equipment that has only our soldier by authentication, panzer, aircraft etc. to carry can be asked the access sensors Internet resources, and obtains correct response in time.
1, sensor network disposition and operation way
Have three kinds of nodes in the sensor network: sensor node, user and central server, its deployment way as shown in Figure 1.
Sensor network is deployed in the monitored area by extensive (the node number is a hundreds of or thousands of), and (as stain in the circle of Fig. 1) continues to monitor and collect environmental data, for the user provides the environmental data Monitoring Service.
The user is the mobile device that needs the access sensors network, as: notebook computer, PDA, mobile phone etc.User (user of ordering services or our soldier etc.) with corresponding authority can and meet with a response to network transmission request by the sensor network authentication.
Central server is responsible for initialization and management of sensor network, distributes authentication information to node, and the service ordering of accepted user is given and ordered professional user's distribution network access rights etc.
2, existing sensors method for network access control
The existing sensors network is because the resource strictness is limited, and security intensity is not high, and the easy victim of node and user is caught.These make research sensor network access controlling mechanism be faced with great challenge.Traditional access control scheme based on PKI can not directly be applied in the sensor network greatly because of resource consumption.Up to the present, state, the inside and outside sensor network access control method that does not also have system.Existing research also mainly concentrates in the authentication of sensor network to the user.Most typical have a dual mode: one is Z.Benenson[Germany in 2005] authentification of user of the robustness of the cryptographic system that uses public-key that proposes; Its basic thought is to allow be in the gateway that sensor node in the telex network scope serves as the symmetric key world of user's the unsymmetrical key world and sensor network.User's authentication mode that uses public-key sends to sensor node in its communication range with request, the mode authenticated user request that uses public-key of these nodes, and use the symmetric key mode request to be forwarded to other nodes of network.Two is Satyajit Banerjee[India in 2006] the request authentication that proposes based on symmetric key.It uses the symmetric key mode fully, has reduced computing cost, but the support whether perfect sensor network cipher key management agreement is arranged is depended in the application of this method.Have following shortcoming in above-mentioned two modes of secure context: the sensor node that 1) receives user request can not authenticate this request immediately, can the authenticated user request as long as receive abundant information, be subjected to DoS attack easily; 2) can not resist the Replay Attack of old solicited message; 3) when the node of some is hunted down, the user authentication protocol failure, network can not resist node and catch attack.The present invention considers the self-characteristic of sensor network, proposes a kind of sensor network access control method of energy efficient, has overcome the shortcoming that existing mode exists.
The content of invention
The objective of the invention is to solve the deficiencies in the prior art part, radio sensor access control method based on key chain has been proposed, five kinds of access control schemes that the method comprises, the sensor network resource that all can guarantee different scenes are resisted malicious node and destroy network by legal use.
Theing contents are as follows of the access control method that the present invention proposes:
Mode 1: based on the access control of single key chain
This visit control mode is used one-way key chain.Before disposing, all sensor nodes all are assigned with the begin chain key of key chain.Have on the key chain user of key continuously, can use these keys to send solicited message in network, sensor node uses the begin chain key of preallocated key chain can the authenticated user solicited message, thereby judges whether the user has the authority of accesses network.If authentication is passed through, if sensor network response user request is authentification failure then abandon user's request.
Mode 2: based on the access control of many key chains
This visit control mode is used a plurality of key chains.Each key chain all adopts the method in the mode 1 to work alone.This mode can guarantee that a plurality of users are the accesses network resource simultaneously.
Mode 3: based on the access control of Merkle tree
In access control scheme 2, each sensor node all needs to preserve the begin chain key of all key chains, causes the sensor node storage overhead big.In order to reduce the storage overhead, with the hash value of the begin chain key of all key chains as leaf node structure Merkle tree.Each sensor node root information of store M erkle tree only like this, the begin chain key of the key chain of just can authenticated user broadcasting and the solicited message of authenticated user.
Mode 4: extendible Merkle tree access control
In order to increase the extensibility of access control scheme 3, can give the legal identity of a large amount of user's assigns access networks and increase the flexibility that the user is controlled.This mode is used multilayer Merkle tree, and its basic thought is exactly: begin chain key and the authenticated user solicited message of using the Merkle subtree distributing key chain of bottom; Use upper strata Merkle root allocation tree authentication and distribute the root of bottom Merkle tree.
Mode 5: user capture ability cancelling method
In mode 1,2,3 and 4, under the situation that user's victim is caught, the assailant can serve as validated user access sensors network, even network is carried out destructive activity.Mode 5 is used Merkle to cancel tree and is write down the key chain that the user that is hunted down has, and with its cancellation.Even the assailant has the key chain of catching like this, still can not accesses network.
Compare with existing method for network access control, the present invention has the following advantages:
1, the present invention makes one-way key chain realize sensor network access control, and mainly the algorithm that uses is hash and MAC, and the computing cost of these algorithms is far smaller than the computing cost that uses asymmetric cryptography mechanism.And the distribution of the generation of one-way key chain and user key chain finishes by central server, do not need the energy of consuming sensor node.
2, use Merkle tree or expansion Merkle tree in this access control method, reduced the storage overhead of sensor node on the one hand, increased the flexibility and the extensibility of access control on the other hand, can support a large amount of users accesses network simultaneously.
3, the present invention does not need the support of other network security protocol, can be compatible mutually with existing sensors network data Radio Broadcasting Agreements, unite use.
4, access control method of the present invention is compared with existing access control method and is had higher fail safe.Can user's solicited message be authenticated immediately, can resist DoS attack; Since each key in the key chain only corresponding a user request information, the attack that can resist the old solicited message of resetting; Merkle cancels tree can cancel the user capture control ability, can resist node and catch attack.
5, the present invention provides a good operation way for sensor network, from the network design to the service subscription, arrives Operational Visit again.This operation way is NM in the existing sensors network research.This operation way will be accelerated the practicalization of sensor network.
Description of drawings
Fig. 1 is sensor network disposition figure
Fig. 2 generates figure for one-way key chain
Fig. 3 is the request message figure of mode 1
Fig. 4 is the response message figure of mode 1
Fig. 5 is the access control flow chart of mode 1
Fig. 6 is that many key chains of mode 2 generate figure
Fig. 7 is mode 2, mode 3 request message figure
Fig. 8 is mode 2, mode 3 response message figure
Fig. 9 is the access control flow chart of mode 2
Figure 10 is the structural map of Merkle tree
Figure 11 is the access control flow chart of mode 3
Figure 12 is the structural map of two-layer Merkle tree
Figure 13 is the request message figure of mode 4
Figure 14 is the response message figure of mode 4
Figure 15 is mode 4 access control flow charts
Figure 16 is for cancelling the tree structural map
Figure 17 cancels message diagram
Figure 18 is the flow chart of cancelling of mode 5
Embodiment
In conjunction with above-mentioned accompanying drawing, the embodiment of the variety of way that the sensor network access control method that the present invention proposes is included is as follows:
One. the concrete implementation step of mode 1:
1, one-way key chain produces: it is n one-way key chain K that central server at first produces a length 0..., K n, production process is: central server is selected last key K in the key chain at random n, utilize an one-directional dummy random function F (as: hash function, MD5 etc.) repeated calculation K then j=F (K J+1), 0≤j＜n, key chain is constructed as shown in Figure 2;
2, sensor network disposition: before sensor network disposition, each sensor node is all by the begin chain key K of the key chain that produces in the preassignment step 1 0
3, user right application: the user is to central server application access sensors network, and central server is given a continuous subchain of user's distributing key chain, and how much length of subchain is by determining of user's ordering services.Annotate: central server is always allocated the lower key subchain of key identification in advance, during as beginning from K 1Begin to distribute;
4, access to netwoks: if the key subchain that the user obtains is K p..., K q, p＜q, this user can send q-p+1 request (key is used in request of every transmission) at most in network.The user asks the process of network data to be:
I) user is near network, and in network broadcast request, User → WSN : UserID | | i | | require | | MAC K i ( UserID | | i | | require ) | | K i , I represents cipher mark, the polyphone of " || " expression information, and concrete broadcast message format is as shown in Figure 3;
Ii) receive the sensor node of this request, by checking i＞j, K j=F I-j(K i) whether become Rob Roy to authenticate K iAuthenticity, K wherein jThe authenticate key of preserving for sensor node (is initially the begin chain key K of preassignment key chain 0).If authentication is passed through, then prove K iBe real, sensor node uses K then iCome the MAC of authenticated user solicited message, promptly verify the integrality of message.If authentication is passed through, the sensor node response request, and use K iReplace K j, otherwise abandon user's request.The form of sensor network response message as shown in Figure 4.
The complete access control flow process of mode 1 as shown in Figure 5.
Two. the concrete implementation step of mode 2:
1, a plurality of key chains produce: use with based on the identical method of single key chain access control, central server produces m the key chain that length is n, is respectively
Figure B2007100172525D00052
Each key chain all is assigned with unique ID, ID ∈ [1, m].Concrete key chain as shown in Figure 6;
2, sensor network disposition: before sensor network disposition, each sensor node all is assigned with the begin chain key of all key chains
Figure B2007100172525D00053
3, user right application: the user is to central server application access sensors network, central server distributes a key chain that is in idle condition at present to the user, just do not used a continuous subchain of key chain by the user, how much length of this subchain is by determining of user's ordering services; Central server is always allocated the lower key subchain of key identification in advance;
4, access to netwoks: if the key subchain that the user obtains is
Figure B2007100172525D00061
P＜q, 1≤ζ≤m means that this user can send q-p+1 request (key is used in request of every transmission) at most in network.The user asks the process of network data to be:
I) user is near network, and in network broadcast request, User → WSN : UserID | | i | | ζ | | require | | MAC K i ζ ( UserID | | i | | ζ | | require ) | | K i ζ 。Concrete broadcast message format is as shown in Figure 7:
Ii) receive the sensor node checking i＞j of this request, 1≤ζ≤m,
Figure B2007100172525D00063
Whether become the Rob Roy checking
Figure B2007100172525D00064
Authenticity, wherein The begin chain of ζ the key chain of preserving for sensor node (is initially
Figure B2007100172525D00066
).If authentication is passed through, then prove
Figure B2007100172525D00067
Be real, sensor node uses then
Figure B2007100172525D00068
Come the MAC of authenticated user solicited message, promptly verify the integrality of message.If authentication is passed through, the sensor node response request, and use
Figure B2007100172525D00069
Replace
Figure B2007100172525D000610
Otherwise abandon user's request.The response message format of sensor node as shown in Figure 8.
The access control flow process of mode 2 as shown in Figure 9.Mode 2 can guarantee a plurality of users (mostly being m most) access sensors network simultaneously.
Three. the concrete implementation step of mode 3:
1, a plurality of key chains produce: use with based on the identical method of single key chain access control, central server produces m key chain, is respectively chain 1..., chain m, each key chain all is assigned with unique ID, ID ∈ [1, m], and the length of each key chain is m i
2, the generation of Merkle tree: central server calculating K i=H (C i), i ∈ 1 ..., m}, wherein " || " expression information polyphone, H is the one-directional dummy random function.Use { K 1..., K mAs leaf node structure Merkle tree (complete binary tree), each non-leaf node is the hash value of two child nodes polyphone.The Merkle tree of structure is known as parameter and is { C 1..., C mBegin chain encryption key distribution tree.As shown in figure 10, for convenience of description, the present invention uses 8 key chains to be example (but being not limited to this) structure Merkle tree, wherein K 1=H (C 1), K 12=H (K 1|| K 2), K 14=H (K 12|| K 34), K 18=H (K 14|| K 58);
3, the begin chain encryption key distribution certificate of key chain generates: central server is each key chain structure key begin chain encryption key distribution certificate.The certificate of i key chain is by C iForm with its brother who arrives node on the tree root path.For example the begin chain encryption key distribution certificate of the 2nd key chain is CDCert in Figure 10 2={ C 2, K 1, K 34, K 58;
4, sensor network disposition: before sensor network disposition, each sensor node all is assigned with the root of the Merkle tree that generates in the manner step 2.As the K among Figure 10 18
5, user right application: the user is to central server application access sensors network, and central server distributes the begin chain encryption key distribution certificate (being generated by the manner step 3) of one-way key chain and this key chain to the user.Central server is according to the key chain that how much distributes different length of the business of ordering;
6, begin chain encryption key distribution certificate distribution: the user is distributed to sensor node in the mode of authentication with the begin chain encryption key distribution certificate that it was had.Sensor node can obtain the begin chain key of key chain from certificate, if the key chain chain that the user obtains ζCertificate CDCert with this one-way key chain ζThe user just can use key chain access sensors network.Concrete key chain certificate distribution procedure is:
I) user is to sensor network broadcasting begin chain encryption key distribution certificate CDCert ζ
The sensor node of ii) receiving this certificate uses the correctness of the root authentication certificate of preallocated Merkle tree, passes through the chain header of the one-way key chain that comprises in the extraction certificate if verify If authentication failed then abandons information.Whether the method for checking equates for the root of the Merkle tree that relatively draws from certificate and the root of preallocated Merkle tree.If equate then certificate is legal; If unequal then certificate is illegal.In order to specify, provide the process of the begin chain encryption key distribution certificate of second key chain among checking Figure 10.Receive certificate CDCert 2={ C 2, K 1, K 34, K 58Sensor node calculate H (H (H (H (C 2) || K 1) || K 34) || K 58), and it is relatively, equal then verify and pass through unequal authentication failed with the root of result calculated and preallocated Merkle tree;
7, access to netwoks: when sensor node obtained the begin chain of key chain, the user just can use key chain to visit network, and concrete access process is as follows:
I) user is near network, and in network broadcast request, User → WSN : UserID | | i | | ζ | | require | | MAC K i ζ ( UserID | | i | | ζ | | require ) | | K i ζ 。Concrete broadcast message format as shown in Figure 7.
Ii) receive the sensor node of this request, checking i＞j, 1≤ζ≤m, Whether become the Rob Roy checking
Figure B2007100172525D00074
Authenticity, wherein
Figure B2007100172525D00075
The begin chain of ζ the key chain of preserving for sensor node (is initially
Figure B2007100172525D00076
).If authentication is passed through, then prove
Figure B2007100172525D00077
Be real, sensor node uses then
Figure B2007100172525D00078
Come the MAC of authenticated user solicited message, promptly verify the integrality of message.If authentication is passed through, the sensor node response request, and use
Figure B2007100172525D00079
Replace
Figure B2007100172525D000710
Otherwise abandon user's request.The response message format of sensor node as shown in Figure 8.
The complete access control flow process of mode 3 as shown in figure 11.
Four. the concrete implementation step of mode 4:
1, a plurality of key chains produce: use with based on the identical method of single key chain access control, central server produces a large amount of key chains, and these key chains are divided into m group, i organize in the key number be
Figure B2007100172525D00081
I ∈ [1, m];
2, bottom Merkle subtree generates: the method in each group inside according to the step 2 of mode 3 generates m bottom Merkle subtree;
3, upper strata Merkle root allocation tree generates: if more than two levels, then the root with m Merkle subtree of generation in the manner step 2 divides into groups repeating step 2 again.The present invention for convenience is an example with two-layer Merkle tree, and the cryptographic Hash of m Merkle subtree root as leaf node, is generated upper strata Merkle root allocation tree according to the method for step 2 in the mode 3.Understand for convenience, the generative process that illustrates two-layer Merkle tree as shown in figure 12, lower floor is the Merkle subtree that the 4th key group generates, the upper strata be the root generation Merkle root allocation tree of each subtree;
4, the begin chain encryption key distribution certificate of key chain generates: the begin chain encryption key distribution certificate of j key chain in i group is by chain header C I, jForm with its brother who arrives node on the path of Merkle subtree root at own place.In Figure 12, the begin chain encryption key distribution certificate of the 5th key chain in the 4th group is CDCert4 5={ C 4,5, K ' 6, K ' 78, K ' 14;
5, root distributes certificate to generate: central server also is that the root structure root of every stalk tree distributes certificate.The root certificate of i subtree is by C iForm with its brother who arrives node on the path of tree root.Distributing certificate as the root that shows the 4th stalk tree among Figure 12 is RDCert4=={C 4, K 3, K 12, K 58.Use this certificate safely the root of every stalk tree to be distributed to each sensor node, sensor node can utilize the begin chain encryption key distribution certificate of the key chain that the root that is assigned with verifies that the user uses like this;
6, sensor network disposition: before sensor network disposition, each sensor node all is assigned with the root of the upper strata Merkle root allocation tree that generates in the manner step 3, as the K among Figure 12 18
7, user right application: the user is to central server application access sensors network, central server is given user's distributing key chain, the length of key chain is according to how many distribution of the business of ordering, central server uses each key chain group in a certain order, as the begin chain encryption key distribution certificate according to group identification use in order each group and this key chain from small to large;
8, the root of Merkle subtree distributes: before using a key chain group, the root of the Merkle subtree that central server must generate this group is distributed to each sensor node in the mode of authentication.The root of central server broadcasting Merkle subtree distributes certificate, and the sensor node that receives this certificate uses the root of preallocated upper strata Merkle root allocation tree to verify this certificate.Whether the method for checking is relatively to equate from the root of the upper strata Merkle root allocation tree that certificate draws and the root of preallocated upper strata Merkle tree, if equate then certificate is legal, sensor node extracts the root of key subtree from certificate, if unequal certificate is illegal;
9, key chain certificate distribution: the user distributes certificate to be distributed to sensor node the own begin chain that is had key chain in the mode of authentication.Sensor node can obtain the begin chain of key chain from certificate, if the key chain chain that the user obtains PqThe begin chain encryption key distribution certificate CDCertp of (p q key chain in group) and this one-way key chain q, the user just can use key chain access sensors network.Concrete key chain certificate distribution procedure is:
I) user is to sensor network broadcasting begin chain encryption key distribution certificate CDCertp q
The sensor node of ii) receiving this certificate uses the correctness of the root authentication certificate of p bottom Merkle subtree, if verify by extracting the chain header of the key chain that comprises in the certificate
Figure B2007100172525D00091
If authentication failed then abandons information.The method of checking is exactly whether the root of the Merkle subtree of distributing the root of the Merkle subtree that relatively draws from certificate and the step 8 equates, if equate then certificate is legal, if unequal certificate is illegal;
10, access to netwoks: when sensor node obtained the begin chain of key chain, the user just can use key chain to visit network, and concrete access process is as follows:
I) user is near network, and in network broadcast request, User → WSN : UserID | | i | | p | | q | | require | | MAC K i pq ( UserID | | i | | p | | q | | require ) | | K i pq 。Concrete broadcast message format is as shown in figure 13:
Ii) receive the sensor node of this request, checking i＞j, 1≤p≤m,
Figure B2007100172525D00093
Whether become the Rob Roy checking
Figure B2007100172525D00094
Authenticity, wherein
Figure B2007100172525D00095
The begin chain of q key chain in p the key chain group that preserves for sensor node (is initially
Figure B2007100172525D00096
).If authentication is passed through, then prove
Figure B2007100172525D00097
Be real, sensor node uses then
Figure B2007100172525D00098
Come the MAC of authenticated user solicited message, promptly verify the integrality of message.If authentication is passed through, the sensor node response request, and use
Figure B2007100172525D00099
Replace
Figure B2007100172525D000910
Otherwise abandon user's request.The response message format of sensor node as shown in figure 14.
The complete access control flow process of mode 4 as shown in figure 15.
Five. the concrete implementation step of mode 5:
1, cancels the generation of tree: establish and use one-way key chain to be chain in the sensor network 1..., chain m, the chain header of each key chain is
Figure B2007100172525D000911
1≤i≤m.Central server calculates
Figure B2007100172525D000912
1≤i≤m is r wherein iBe random number.With R iThe hash value be leaf node structure Merkle tree, this sets to cancelling tree, the step 2 in building method such as the mode 3.That constructs cancels tree as shown in figure 16;
2, cancellation of doucment generates: central server generates cancellation of doucment, one-way key chain chain for each key chain i, the cancellation of doucment of 0≤i≤m is R iThe brother who cancels node on the path of tree root with its arrival forms.As chain among Figure 16 2Certificate be REVOCert2={R 2, K 1, K 34, K 58;
3, cancel tree root preassignment: before sensor node deployment, the root that central server cancels tree for each node preassignment is as the K among Figure 10 18
4, key chain is cancelled: when detecting user person under attack when threatening, central server is carried out destruction operation;
I) central server is to the cancellation of doucment of the one-way key chain that the user had of Web broadcast person's threat under attack.Broadcast message format as shown in figure 17;
Ii) receive the sensor node authentication revocation certificate of revocation information.Authentication method is: use the cancellation of doucment structure receive to cancel the root of tree, with this root and preallocated root of cancelling tree relatively, equate that revocation information is legal, do not wait then illegally, abandon.
Iii) sensor node is noted the key chain of cancelling, and the begin chain information deletion of this key chain of preserving.
The complete of mode 5 cancelled flow process as shown in figure 18.
Symbol description:
WSN: wireless sensor network;
User: user;
UserID: ID;
Require: subscription request message;
Resp: response message;
MAC: message authentication code;
MAC K: the MAC that uses key K to generate;
F: one-directional dummy random function
The H:hash function;
Chain: key chain;
CDCert: the begin chain encryption key distribution certificate of key chain;
RDCert: the subtree root distributes certificate;
REVOCert: key chain cancellation of doucment.

Claims (9)

1. based on the radio sensor access control method of key chain, use one-way key chain to the sensor network control that conducts interviews, before disposing, all sensor nodes all are assigned with the begin chain key of key chain, have the user of continuous key on the key chain, can use these keys in network, to send solicited message; Sensor node uses the begin chain key of preallocated key chain can the authenticated user solicited message, thereby judge the authority of customer access network, it is characterized in that: use many key chains the sensor network control that conducts interviews, each key chain all adopts the control mode of single key chain to work alone, and guarantees a plurality of users accesses network resource simultaneously.
2. the radio sensor access control method based on key chain according to claim 1, it is characterized in that: structure Merkle tree is to the sensor network control that conducts interviews, with the hash value of the begin chain key of all key chains as leaf node, structure Merkle tree; Make the only root information of store M erkle tree of each sensor node, the begin chain key of the key chain of just can authenticated user broadcasting and the solicited message of authenticated user.
3. the radio sensor access control method based on key chain according to claim 1, it is characterized in that: the Merkle tree of using expansion is to the sensor network control that conducts interviews, the Merkle tree is expanded to multilayer, use the begin chain key and the authenticated user solicited message of the Merkle subtree distributing key chain of bottom; Root with authentication of upper strata Merkle root allocation tree and distribution bottom Merkle tree.
4. be used for claim 2 or 3 described radio sensor access control methods based on key chain, it is characterized in that: use Merkle to cancel tree and write down the key chain that the node that is hunted down has, and, use the key chain malice accesses network of catching to take precautions against the assailant with its cancellation.
5. the radio sensor access control method based on key chain according to claim 1 is characterized in that: with one-way key chain conduct interviews control concrete implementation step as follows:
[1] one-way key chain produces: it is n one-way key chain K that central server produces a length 0..., K n, production process is that central server is selected last key K in the key chain at random n, and utilize an one-directional dummy random function F repeated calculation K j=F (K J+1), 0≤j＜n;
[2] sensor network disposition: before sensor network disposition, each sensor node is all by the begin chain key of the key chain that produces in the preassignment step [1];
[3] user right application: the user is to central server application access sensors network, and central server is given a continuous subchain of user's distributing key chain;
[4] access to netwoks: if the key subchain that the user obtains is K p..., K q, p＜q, then the user can send q-p+1 request at most in network, and the user asks the process of network data to be:
I) user is near network, and in network broadcast request, broadcast message format is: User → WSN : UserID | | i | | require | | MAC K i ( UserID | | i | | require ) | | K i , " || " expression information polyphone, i represents key identification;
Ii) receive the sensor node of this request, by checking i＞j, K j=F I-j(K i) whether become Rob Roy to authenticate K iAuthenticity, K wherein jAuthenticate key for sensor node is preserved if authentication is passed through, then proves K iBe real; Sensor node uses K then iCome the MAC of authenticated user solicited message, the integrality of checking message; If authentication is passed through, the sensor node response request is used K iReplace K j, otherwise abandon user's request.
6. the radio sensor access control method based on key chain according to claim 1 is characterized in that: the concrete implementation step with m user's while access sensors network of many key chain controls is as follows:
Many key chains of 1} produce: use with based on the identical method of single key chain access control, central server produces m the key chain that length is n, is respectively
Figure F2007100172525C00022
Each key chain all is assigned with unique ID, ID ∈ [1, m];
{ the 2} sensor network disposition: before sensor network disposition, each sensor node all is assigned with the begin chain key of all key chains;
{ application of 3} user right: the user is to central server application access sensors network, and central server distributes a continuous subchain that is in the key chain of idle condition at present to the user;
{ 4} access to netwoks: if the key subchain that the user obtains is
Figure F2007100172525C00023
P＜q, 1≤ζ≤m, then the user can send q-p+1 request at most in network, and the user asks the process of network data to be:
I) user is near network, and in network broadcast request, the broadcast request message form is as follows: User → WSN : UserID | | i | | ζ | | require | | MAC K i ζ ( UserID | | i | | ζ | | require ) | | K i ζ , wherein, ζ represents the key chain sign,
Figure F2007100172525C00025
Represent the key that this message is used;
Ii) receive the sensor node checking i＞j of this request, l≤ζ≤m,
Figure F2007100172525C00026
Whether become the Rob Roy checking
Figure F2007100172525C00027
Authenticity, wherein
Figure F2007100172525C00028
The begin chain of ζ the key chain of preserving for sensor node if authentication is passed through, then proves
Figure F2007100172525C00029
Be real; Sensor node uses then Come the MAC of authenticated user solicited message, promptly verify the integrality of message, if sensor node response request, and usefulness are passed through in authentication
Figure F2007100172525C000211
Replace
Figure F2007100172525C000212
Otherwise abandon user's request.
7. the radio sensor access control method based on key chain according to claim 2 is characterized in that: the concrete steps that structure Merk1e sets the control that conducts interviews are as follows:
(1) a plurality of key chains produce: use with based on the identical method of single key chain access control, central server produces m key chain, is respectively chain 1..., chain m, each key chain all is assigned with unique ID, ID ∈ [1, m], and the product degree of each key chain is m i
(2) generation of Merkle tree: central server calculating K i=H (C i), i ∈ 1 ..., m}, wherein H is the one-directional dummy random function, uses { K 1..., K mAs leaf node structure Merkle tree, each non-leaf node is the hash value of two child nodes polyphone, the Merkle tree of structure is known as parameter and is { C 1..., C mBegin chain encryption key distribution tree;
(3) the begin chain encryption key distribution certificate of key chain generates: central server is each key chain structure begin chain encryption key distribution certificate CDCert ζ, the certificate of i key chain is by C iForm with the brother of its node to the root node path;
(4) sensor network disposition: before sensor network disposition, each sensor node all is assigned with the root of the Merkle tree that generates in the step (2);
(5) user right application: the user is to central server application access sensors network, and central server distributes the begin chain encryption key distribution certificate of one-way key chain and this key chain to the user;
(6) begin chain encryption key distribution certificate distribution: the user is distributed to sensor node in the mode of authentication with the begin chain encryption key distribution certificate that is had, and sensor node can obtain the begin chain key of key chain from certificate, if the key chain chain that the user obtains ζCertificate CDCert with this one-way key chain ζ, then the user just can use key chain access sensors network; Key chain certificate distribution procedure is:
I) user is to sensor network broadcasting begin chain encryption key distribution certificate CDCert ζ
Ii) receive the sensor node of encryption key distribution certificate, use the correctness of the root authentication certificate of preallocated Merkle tree,, extract the chain header of the one-way key chain that comprises in the certificate if checking is passed through If authentication failed then abandons information; Verification method is whether root of the Merkle tree that relatively draws from certificate and the root of preallocated Merkle tree equate, if equate then certificate is legal, if unequal then certificate is illegal;
(7) access to netwoks: when sensor node obtained the begin chain of key chain, the user just can use the key chain accesses network, and concrete access process is as follows:
I) user is near network, and in network broadcast request, concrete broadcast message format is shown below; User → WSN : UserID | | i | | ζ | | require | | MAC K i ζ ( UserID | | i | | ζ | | require ) | | K i ζ ;
Ii) receive the sensor node of this request, checking i＞j, 1≤ζ≤m,
Figure F2007100172525C00034
Whether become the Rob Roy checking
Figure F2007100172525C00035
Authenticity, wherein
Figure F2007100172525C00036
The begin chain of ζ the key chain of preserving for sensor node, wherein
Figure F2007100172525C00037
Be initially If authentication is passed through, then prove
Figure F2007100172525C00039
Be real, sensor node uses then
Figure F2007100172525C000310
Come the MAC of authenticated user solicited message, promptly verify the integrality of message, if sensor node response request, and usefulness are passed through in authentication
Figure F2007100172525C000311
Replace
Figure F2007100172525C000312
Otherwise abandon user's request.
8. the radio sensor access control method based on key chain according to claim 3 is characterized in that: use the concrete steps of the Merkle tree access control of expanding as follows:
1) a plurality of key chains produce: use with based on the identical method of single key chain access control, central server produces a large amount of key chains, and these key chains are divided into m group, i organize in the key number be
Figure F2007100172525C00041
I ∈ [1, m];
2) bottom Merkle subtree generates: inner in each group according to the method that generates the Merkle tree, generate m bottom Merkle subtree;
The root of m the Merkle subtree that generates 3) upper strata Merkle root allocation tree generation: if more than two levels, then with step 2) divides into groups repeating step 2 again); The cryptographic Hash of m Merkle subtree root generating as leaf node, is generated upper strata Merkle root allocation tree according to the method that generates the Merkle tree;
4) the begin chain encryption key distribution certificate of key chain generates: the begin chain encryption key distribution certificate of j key chain in i group is by chain header C I, jForm with its brother who arrives node on the path of Merkle subtree root at place;
5) root distributes certificate to generate: central server also is that the root structure root of every stalk tree distributes certificate, and it is by C that the root of i subtree distributes certificate iForm with its brother who reaches node on the path of tree root; Use root to distribute certificate safely the root of every stalk tree to be distributed to each sensor node, sensor node can utilize the begin chain encryption key distribution certificate of the key chain that the root that is assigned with verifies that the user uses;
6) sensor network disposition: before sensor network disposition, each sensor node all is assigned to the root of the upper strata Merkle root allocation tree that generates in the step 3);
7) user right application: the user is to central server application access sensors network, and central server is given the begin chain encryption key distribution certificate of user's distributing key chain and this key chain;
8) root of Merkle subtree distributes: before using a key chain group, the root of the Merkle subtree that central server must generate this group is distributed to each sensor node in the mode of authentication, the root of central server broadcasting Merkle subtree distributes certificate, the sensor node that receives this certificate uses the root of preallocated upper strata Merkle root allocation tree to verify this certificate, whether verification method is for relatively equating from the root of the upper strata Merkle root allocation tree that certificate draws and the root of preallocated upper strata Merkle tree, if equate then certificate is legal, sensor node extracts the root of key subtree from certificate, if unequal then certificate is illegal;
9) key chain certificate distribution: the user with the mode of authentication with had key chain begin chain encryption key distribution certificate be distributed to sensor node, sensor node obtains the begin chain of key chain from certificate, if the key chain chain that the user obtains PqCertificate CDCertp with this one-way key chain q, key chain access sensors network, wherein chain just can be used in the family PqBe q key chain in p the group, concrete key chain certificate distribution procedure is:
I) user is to sensor network broadcasting certificate CDCertp q
The sensor node of ii) receiving certificate uses the correctness of the root authentication certificate of p bottom Merkle subtree, passes through the chain header of the key chain that comprises in the extraction certificate if verify
Figure F2007100172525C00051
If authentication failed then abandons information, the method for checking is: relatively whether the root of the Merkle subtree of distributing the root of the Merkle subtree that draws from certificate and the step 8) equates, if equate then certificate is legal, if unequal certificate is illegal;
10) access to netwoks: when sensor node obtained the begin chain of key chain, the user just can use key chain to visit network, and concrete access process is as follows:
I) user is near network, and in network broadcast request, concrete broadcast message format is shown below: User → WSN : UserID | | i | | p | | q | | require | | MAC K i pq ( UserID | | i | | p | | q | | require ) | | K i pq ;
Ii) receive the sensor node of this request, checking i＞j, 1≤p≤m,
Figure F2007100172525C00053
Whether become the Rob Roy checking Authenticity, wherein Be the begin chain of q key chain in p the key chain group of sensor node preservation, wherein
Figure F2007100172525C00056
Be initially
Figure F2007100172525C00057
If authentication is passed through, then prove
Figure F2007100172525C00058
Be real, sensor node uses
Figure F2007100172525C00059
The MAC of authenticated user solicited message promptly verifies the integrality of message, if sensor node response request, and using is passed through in authentication
Figure F2007100172525C000510
Replace
Figure F2007100172525C000511
Otherwise abandon user's request.
9. want 4 described radio sensor access control methods based on key chain according to right, it is characterized in that: it is as follows to use Merkle to cancel the be hunted down concrete implementation step of the key chain that node has of tree record:
1] Merkle cancels the generation of tree: establish and use one-way key chain to be chain in the sensor network 1..., chain m, the chain header of each key chain is
Figure F2007100172525C000512
1≤i≤m, central server calculates
Figure F2007100172525C000513
1≤i≤m, wherein r iBe random number, with R iThe hash value be leaf node, according to Merkle tree building method structure Merkle tree, this sets to cancelling tree;
2] cancellation of doucment generates: central server generates cancellation of doucment, one-way key chain chain for each key chain i, the cancellation of doucment of 0≤i≤m is R iThe brother who cancels node on the path of tree root with its arrival forms;
3] cancel tree root preassignment: before sensor node deployment, central server cancels the root of tree for each node preassignment;
4] key chain is cancelled: when detecting user person under attack when threatening, central server is carried out destruction operation:
I) central server is to the cancellation of doucment of the one-way key chain that the user had of Web broadcast person's threat under attack;
Ii) receive the sensor node authentication revocation certificate of revocation information, authentication method is: use the cancellation of doucment structure of receiving to cancel the root of tree, this root and preallocated root of cancelling tree are compared, equate that revocation information is legal, unequal is illegal, abandons;
Iii) sensor node is noted the key chain of cancelling, with the begin chain information deletion of this key chain of preserving.
CN2007100172525A 2007-01-18 2007-01-18 Radio sensor access control method based on key chain Expired - Fee Related CN101005459B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2007100172525A CN101005459B (en) 2007-01-18 2007-01-18 Radio sensor access control method based on key chain

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2007100172525A CN101005459B (en) 2007-01-18 2007-01-18 Radio sensor access control method based on key chain

Publications (2)

Publication Number Publication Date
CN101005459A CN101005459A (en) 2007-07-25
CN101005459B true CN101005459B (en) 2011-01-05

Family

ID=38704329

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2007100172525A Expired - Fee Related CN101005459B (en) 2007-01-18 2007-01-18 Radio sensor access control method based on key chain

Country Status (1)

Country Link
CN (1) CN101005459B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102546650A (en) * 2012-01-19 2012-07-04 北京工业大学 End-to-end safety control method for wireless sensor network and internet intercommunication

Families Citing this family (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101159748B (en) * 2007-11-14 2010-10-06 北京科技大学 Entity authentication method in wireless sensor network
CN101335612B (en) * 2008-07-30 2011-05-25 浙江工业大学 Bilinear cipher key pair pre-distributing method oriented to safety of mobile self-organizing network
CN101877690B (en) * 2009-04-03 2014-09-03 西安西电捷通无线网络通信股份有限公司 Broadcast authentication method for wireless network with limited node resource
CN101610452B (en) * 2009-07-15 2011-06-01 西安西电捷通无线网络通信股份有限公司 Method for integrating network authentication and key management mechanism of sensor
CN101711027B (en) * 2009-12-22 2012-07-04 上海大学 Method for managing dispersed keys based on identities in wireless sensor network
CN102006595B (en) * 2010-12-07 2013-04-17 东南大学 Key management method of wireless sensor network
CN102164367B (en) * 2011-04-14 2014-04-16 北京理工大学 Key management method used for wireless sensor network
CN102164369B (en) * 2011-05-13 2013-09-25 南京邮电大学 Method for broadcast authentication of wireless sensor network based on automaton and game of life
CN102883466B (en) * 2011-07-15 2014-10-29 中国科学院深圳先进技术研究院 Data dissemination method in wireless sensor network
CN103095451B (en) * 2011-11-02 2016-08-10 ***通信集团广东有限公司 A kind of method being authenticated in sensor network and sensor network
CN103702325B (en) * 2013-12-19 2017-04-19 华南理工大学 Lightweight wireless sensor network safety small data distribution method
CN103853661B (en) * 2014-02-21 2016-08-31 北京神舟航天软件技术有限公司 The space Flouride-resistani acid phesphatase fault detection method realized based on weighting Merkle tree
CN106850508B (en) * 2015-12-07 2020-04-17 中国电信股份有限公司 Security group communication method and system and related device
CN105407181B (en) * 2016-01-08 2021-12-28 杨大全 Network data recording system and network data recording method thereof
CN105487556B (en) * 2016-01-27 2019-05-24 谭圆圆 The flight control method and flight control assemblies of unmanned vehicle
DE102016116152A1 (en) * 2016-04-30 2017-11-02 Krohne Messtechnik Gmbh Electrical device with a functional device
US10637847B2 (en) * 2016-09-29 2020-04-28 British Telecommunications Public Limited Company Collection of sensor data from sensor devices
CN110691358B (en) * 2019-11-14 2022-10-14 北京京航计算通讯研究所 Access control system based on attribute cryptosystem in wireless sensor network
CN112015734B (en) * 2020-08-06 2021-05-07 华东师范大学 Block chain-oriented compact Merkle multi-value proof parallel generation and verification method

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1761186A (en) * 2005-11-11 2006-04-19 南京邮电大学 Method for distributing net key

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1761186A (en) * 2005-11-11 2006-04-19 南京邮电大学 Method for distributing net key

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
Satyajit Banerjee,Debapriyay Mukhopadhyay.Symmetric Key Based Authenticated Querying inWirelessSensor Networks.InterSense＇06,Proceedings of the First International Conference on Integrated Internet Ad hoc and Sensor Networks.2006,全文. *
SatyajitBanerjee Debapriyay Mukhopadhyay.Symmetric Key Based Authenticated Querying inWirelessSensor Networks.InterSense＇06
郎为民等.一种高效的无线传感器网络认证方案.信息工程大学学报7 1.2006,7(1),摘要, 第1.1节,第1.2节,第2.1节.
郎为民等.一种高效的无线传感器网络认证方案.信息工程大学学报7 1.2006,7(1),摘要, 第1.1节,第1.2节,第2.1节. *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102546650A (en) * 2012-01-19 2012-07-04 北京工业大学 End-to-end safety control method for wireless sensor network and internet intercommunication

Also Published As

Publication number Publication date
CN101005459A (en) 2007-07-25

Similar Documents

Publication Publication Date Title
CN101005459B (en) Radio sensor access control method based on key chain
Bera et al. Designing secure blockchain-based access control scheme in IoT-enabled Internet of Drones deployment
WO2011047548A1 (en) Key management and node authentication method for sensor network
CN103313246B (en) A kind of wireless sense network double factor authentication method and device and network thereof
Rashid et al. Secure communication in UAV assisted HetNets: a proposed model
Zhang et al. Efficient and Privacy‐Aware Power Injection over AMI and Smart Grid Slice in Future 5G Networks
CN104717645B (en) Guarantee the data transmission method and its system of wireless sensor network
CN108882238A (en) A kind of lightweight rotation ca authentication method in mobile ad hoc network based on common recognition algorithm
Ghosh et al. SDRP: secure and dynamic routing protocol for mobile ad‐hoc networks
Mohindru et al. A review on lightweight node authentication algorithms in wireless sensor networks
Chunka et al. An efficient user authentication and session key agreement in wireless sensor network using smart card
Hosen et al. SPTM-EC: A security and privacy-preserving task management in edge computing for IIoT
CN113645196A (en) Internet of things equipment authentication method and system based on block chain and edge assistance
Lin et al. A role based privacy-aware secure routing protocol for wireless mesh networks
Bansal et al. SHOTS: Scalable secure authentication-attestation protocol using optimal trajectory in UAV swarms
Islam et al. An ECC based secure communication protocol for resource constraints IoT devices in smart home
Verma et al. A lightweight secure authentication protocol for wireless sensor networks
Joshitta et al. Authentication in IoT environment: A survey
Lath et al. BDESF-ITS: Blockchain-based secure data exchange and storage framework for intelligent transportation system
Peng et al. Security technology analysis of IoT
Jaballah et al. Lightweight source authentication mechanisms for group communications in wireless sensor networks
Sharma et al. Node authentication in WSN using key distribution mechanism
Gowda et al. TAKM-FC: Two-way Authentication with efficient Key Management in Fog Computing Environments
Nanda et al. Secure and efficient key management scheme for wireless sensor networks
Zhang et al. A Novel and Efficient Authentication Scheme Based on UAV‐UAV Environment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20110105

Termination date: 20170118